Maintenance and security release of the Drupal 7 series.

Note that this security release introduced a regression which was fixed in Drupal 7.87.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:

No other fixes are included.

Important update information

  • No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so updating custom versions of those files is not necessary if your site is already on the previous release.
VCS Label
7.86
Core compatibility
Release type
Short description
Supported until November 2022. Use this version for sites already running Drupal 7.
Packaged Git sha1
c991d5749144c851b71aa7be721715d7e346526f
Release files
9d27bd15f8fc95ffbde88769cf2c26b2
Release file SHA-1 hash
76892f7a109744a3760ce3b016ec9c6805669d40
Release file SHA-256 hash
bc43600a1157150c3f0504ad0ec28846f5ad00261e827d01744b800b1dd0888f
bda790c6f3e78871a496f4bbc8c5645b
Release file SHA-1 hash
c5874979bfff5367dfb0c2d25b673eff706fad56
Release file SHA-256 hash
73599522e40af9b980168955efc1aee026e729749e38958aa0601db7a94b0732